Vulnerabilities > CVE-2006-0099 - Remote File Include vulnerability in Valdersoft Shopping Cart 3.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
valdersoft
exploit available
NVD
Published: 2006-01-06
Updated: 2017-10-19

Summary

PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter.

Vulnerable Configurations

Part Description Count
Application
Valdersoft
1

Exploit-Db

descriptionValdersoft Shopping Cart <= 3.0 Remote Command Execution Exploit. CVE-2006-0099. Webapps exploit for php platform
fileexploits/php/webapps/1401.pl
idEDB-ID:1401
last seen2016-01-31
modified2006-01-03
platformphp
port
published2006-01-03
reportercijfer
sourcehttps://www.exploit-db.com/download/1401/
titleValdersoft Shopping Cart <= 3.0 - Remote Command Execution Exploit
typewebapps

References